| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-1324 | 4.8 | The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed | 2022-08-04 18:47:00 | 2022-08-01 13:15:00 |
| CVE-2022-31776 | 8.8 | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from | 2022-08-04 18:35:00 | 2022-08-01 11:15:00 |
| CVE-2022-31775 | 9.1 | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vul | 2022-08-04 18:34:00 | 2022-08-01 11:15:00 |
| CVE-2022-31774 | 5.4 | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte | 2022-08-04 18:33:00 | 2022-08-01 11:15:00 |
| CVE-2022-34558 | 9.8 | WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package. | 2022-08-04 18:14:00 | 2022-07-28 23:15:00 |
| CVE-2016-4427 | 7.5 | In zulip before 1.3.12, deactivated users could access messages if SSO was enabled. | 2022-08-04 17:56:00 | 2022-07-28 17:15:00 |
| CVE-2022-22505 | 7.5 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentials to be exposed. IBM X-Force ID: 227288. | 2022-08-04 17:38:00 | 2022-08-01 11:15:00 |
| CVE-2022-22326 | 3.3 | IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and files due to insufficient authorization checks. IBM X-Force ID: 218856. | 2022-08-04 17:36:00 | 2022-08-01 11:15:00 |
| CVE-2016-4426 | 4.3 | In zulip before 1.3.12, bot API keys were accessible to other users in the same realm. | 2022-08-04 17:36:00 | 2022-07-28 17:15:00 |
| CVE-2022-29558 | 8.8 | Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface. | 2022-08-04 17:28:00 | 2022-07-28 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: